Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: RXK0iULE+6ykzRYB/6DDgAaFPhhDxYWkii/NxgRSsHc=
Subject key identifier: 61:1A:4E:2D:18:67:FC:42:CD:11:F9:84:E6:F3:CF:3B:B5:BA:DF:1E
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 0198D66007817CA52E8FEEC5F3B03138D524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0A21
Signing time: Sat 23 Aug 2025 10:01:14 +0000
Manifest this update: Sat 23 Aug 2025 10:01:14 +0000
Manifest next update: Sun 24 Aug 2025 10:01:14 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: Kh/eeIbjuK+8XATzfqxLZMh5eCNzfVL1l2l88cxtT2k=)
2: p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa (hash: fmxxB5F2kwLUu456RKJpssuFKFMbicdIEkOy2yPaKKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:07:81:7c:a5:2e:8f:ee:c5:f3:b0:31:38:d5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Aug 23 10:01:14 2025 GMT
Not After : Aug 24 10:01:14 2025 GMT
Subject: CN=611a4e2d1867fc42cd11f984e6f3cf3bb5badf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:c6:e9:ae:b2:6d:61:05:75:c1:24:13:5c:
5f:89:02:e6:df:39:a5:f9:4d:1f:e1:4b:d9:02:cc:
c9:d2:4a:66:67:c6:1c:2c:b4:30:5e:0c:63:39:f8:
c5:af:79:16:99:c7:d2:0a:83:83:b8:99:fa:26:24:
f3:64:dd:ab:5f:38:fc:5c:60:4d:98:db:7a:11:19:
48:bd:dc:83:e0:2c:fd:2c:1f:2c:f3:ed:01:f8:53:
d3:cb:f7:50:ca:82:47:ff:ed:af:47:3f:a3:ca:f3:
1f:2d:9f:e0:d6:27:fe:a9:15:4b:c0:73:01:de:16:
03:df:57:2c:fb:85:08:96:2b:3c:aa:c9:6a:56:45:
19:74:53:b7:85:1f:eb:c1:05:b5:7c:66:dd:22:4c:
c8:54:7e:6a:c9:f3:a4:4f:c9:c8:71:56:16:33:f8:
f4:9c:66:16:a4:b3:ae:a8:7a:f1:c7:d4:b3:8d:ff:
f5:68:86:3d:d0:73:df:92:da:40:98:5c:ab:1d:4a:
db:03:cb:49:7d:b5:6a:42:45:18:7f:41:f8:5b:d7:
f3:90:f3:ab:32:8c:90:03:72:26:eb:fa:71:62:12:
b2:2c:06:98:f9:73:eb:85:98:3a:d2:62:d6:01:45:
a2:76:33:b5:b4:b7:df:54:7e:35:c0:34:02:43:74:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1A:4E:2D:18:67:FC:42:CD:11:F9:84:E6:F3:CF:3B:B5:BA:DF:1E
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:61:09:89:58:f3:15:7b:6c:c8:5e:0f:db:ed:73:c2:6f:20:
9b:8f:42:fd:fd:b7:ac:ed:70:b1:fa:5e:12:d2:44:ce:fa:3e:
2f:88:dc:d0:d8:7c:40:27:db:e9:45:f6:ff:37:3f:96:f2:12:
e6:f8:b5:57:2c:a8:56:c8:28:0b:95:58:08:b4:f5:0e:86:a1:
f8:fa:db:ed:db:e5:dd:8d:5f:ae:d6:74:b5:ff:aa:ac:8d:c5:
85:9c:50:02:04:a3:1f:48:f4:8a:e9:67:4c:32:1e:3a:91:4d:
e5:f6:ec:96:0d:ae:6b:0a:81:8e:99:21:99:f2:68:86:06:83:
e7:4c:fd:01:f1:77:c5:e3:dc:ca:a3:2e:34:73:ab:34:86:0d:
82:7f:c9:37:65:a9:52:0b:35:01:4b:dc:76:56:65:5e:bf:4a:
da:b8:18:26:ca:93:95:51:20:46:af:ae:43:77:a3:5e:80:26:
7b:4e:f0:e2:21:ca:77:73:5b:26:ef:58:24:6d:56:51:74:28:
7c:9a:f0:94:e4:32:c0:a4:88:b4:8b:59:76:d2:19:18:0b:b2:
eb:d8:9c:5e:be:0d:4d:05:8d:d1:c1:b6:2b:f8:97:4a:e7:ea:
3f:3e:3d:23:36:ab:bb:19:d2:63:8d:56:01:c6:d9:e7:82:3a:
27:8d:dd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:41 2025 by rpki-client